Privilege Escalation Vulnerability in WPGuppy by Amento Tech Pvt Ltd

CVE-2024-56280

What is CVE-2024-56280?

The WPGuppy plugin from Amento Tech Pvt Ltd is susceptible to an Incorrect Privilege Assignment vulnerability, enabling malicious users to escalate their privileges within the application. This flaw allows unauthorized access to sensitive features or data, potentially compromising the integrity and security of the affected WordPress installations. Users of versions up to and including 1.1.0 should take immediate action to remediate the vulnerability.

References